Zone transfer problem for BIND name server

[amran at isp.time.net.my]

Hi all

I'm having problem to do a zone transfer for my off-site slaves name server
as the local firewall does not
allow TCP for port 53. Could I configure my BIND name servers to do the zone
transfer by using UDP instead of TCP ? 
or ; 
If  I'm running a slave name server to an off-site master server, do I need
to open the TCP port in the local firewall for the zone transfer?